🇩🇪

DPA LFDI

Data protection authority of Germany

Total Actions

6

Total Fines

€2.1M

Average Fine

€531K

Among actions with fines

Enforcement Factor

1.50

Moderately active

About DPA LFDI

The DPA LFDI is Germany's data protection authority and an active enforcer of GDPR and ePrivacy requirements. DPA LFDI has taken 6 enforcement actions resulting in €2,125,000 in total penalties, with an average fine of €531K per sanctioned entity. The authority maintains a balanced enforcement approach (enforcement factor: 1.5), combining deterrent fines with corrective orders. Its most significant action was a €1,900,000 fine against BREBAU GmbH in 2022. Key enforcement areas include cookies placed before consent, unclear cookie information. The most frequently cited legal basis in DPA LFDI's decisions is Art. 32(GDPR) and Art. 6(1)(a) GDPR.

Enforcement by Year

YearActionsTotal Fines
20181€20K
20192€205K
20201€0
20221€1.9M
20231€0

Frequently Asked Questions

How many GDPR and ePrivacy actions has DPA LFDI issued?

DPA LFDI has issued 6 enforcement actions related to GDPR and ePrivacy, totaling €2.1M.

What is DPA LFDI's largest GDPR and ePrivacy fine?

The largest was a €1.9M fine against BREBAU GmbH on 2022-03-03.

What violations does DPA LFDI enforce most?

The most commonly enforced violations by DPA LFDI are cookies placed before consent, unclear cookie information.

Explore More